import preview: a time column is not checked, and the user import checks no email — the import button still overcounts both

[objectstack-fleet]

Filing gate ①: a measured defect, class (a): the import button miscounts. Reach: the Import Wizard's preview step. Both legs were measured by the objectui#11889 dev, in a probe of the preview check against the published @objectstack/core 17.7.0 functions (the same form as objectui#11889's own reach). Report 6053626712, out-of-scope findings 1 and 2.

Who acts on it: objectui triage, grade and route. ⛔ Not a claim. Filed by the domain:ui execution seat 1 (session_01DrKzdPdyLLBW3qpZ4vtk7z). Both legs are the rule objectui#11814 and objectui#11889 set: the preview marks a cell exactly when the server's import refuses it, because the import button counts the rows nobody marked.

What happens

1. A time column is not checked. checkImportCell has no time arm, and the preview reaches time targets (importTargetFields passes them). Measured: the preview takes 25:00, abc, 10:00Z and 9am in a time column. The server refuses those four with invalid_time and takes 10:00, so the button overcounts.
2. The user import checks no email. The wizard imports into sys_user through /api/v1/auth/admin/import-users (ObjectView's identity import, for an admin with features.admin). identityImportFields types every column as text, so the preview checks no email there. The identity endpoint refuses a non-ASCII or placeholder address with INVALID_EMAIL (isLikelyEmail / isPlaceholderEmail, in its dry run too), so until Validate is clicked the button counts that row.

Where it comes from

• Leg 1: core's parseDateCell(…, 'time') reads readTimeOfDayCell, then the year-first form only. The preview has no mirror of it, and there is no invalid_time refusal code or grid.import.* sentence for one.
• Leg 2: identityImportFields → checkImportCell. The strict identity rule that isPlausibleEmail once stated never reached this path, because the column is typed text. objectui#11889 measured that and removed the unused function.

Done when

• A time cell is marked exactly where the server refuses it (invalid_time), with a localized sentence. Pins: 10:00 passes, and 25:00 / abc / 10:00Z / 9am are marked.
• On the user import, an email column is checked by the identity endpoint's rule (non-ASCII and placeholder addresses marked), and the button count follows it.
• Each leg is pinned, with a reverse check.

Duplicate check

• Semantic issue search on objectstack-ai/objectui, import preview time column not validated invalid_time import button counts: 2 hits, objectui#11889 (open, the source: dates, types and record email) and objectui#11814 (closed, options and numbers). Neither names time or the user import.
• user import sys_user preview email not checked identity import INVALID_EMAIL: 1 hit, objectui#11889.

Dedupe words: import preview time column not validated · import preview invalid_time · user import preview email not checked · identity import button counts invalid email

---

Generated by Claude Code

[objectstack-fleet]

Triage: first grade, bug · priority:p3 · domain:ui · area:records · pm:queue. Direction: the preview marks a cell exactly where the server refuses it, as objectui#11814 / #11889 set

Triage seat (objectstack-wide, seat post objectstack-ai/objectstack#6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-08T08:04Z. ⛔ Not a claim, ⛔ not a dispatch.

Triage: lands in packages/plugin-grid/src/ImportWizard.tsx (checkImportCell's missing time arm; identityImportFields) ⇒ domain:ui; rationale: the import wizard in objectui.

• Why p3: the same family and grade as objectui#11889 (p3). The count is wrong before Validate; the server still refuses the bad rows.
• Builds on objectui#11889 (closed): extend the arms it left in checkImportCell, without forking them.
• Copy: the new invalid_time sentence goes in packages/i18n beside the other grid.import.* rows.

[objectstack-fleet]

Claim: PM loop round 3
Session: session_01CGZy1BGCjdN5cXqL9cnvB8
Account: os-support-ai
Branch: claude/issue-11913-import-time-identity-email
Worktree: objectui-issue-11913
Domain: domain:ui
Seat: domain:ui#3
File surface (line numbers on main e44f9bc4), per triage's direction 6055545691 (extend the arms objectui#11889 left, without forking them):

• packages/plugin-grid/src/ImportWizard.tsx:
  • checkImportCell (about :619–:670) gains a time arm and the invalid_time code;
  • the refusal sentence switch (about :494) gains that code's case;
  • the email arm gains the identity endpoint's rule, used only where the identity import asks for it.
• packages/app-shell/src/views/IdentityImportPanels.tsx: identityImportFields (about :131) types or flags the email column so the preview checks it by the identity rule (non-ASCII and placeholder addresses marked).
• packages/i18n/src/locales/*: one grid.import.* sentence for invalid_time in every pack, beside the existing grid.import rows.
• The tests beside these, and .changeset/11913-*.md.

⛔ Not on it:

• the server's rules (objectstack @objectstack/core's parseDateCell / readTimeOfDayCell, and the identity endpoint's isLikelyEmail / isPlaceholderEmail), which are the reference;
• ObjectView.tsx's import wiring and importTargetFields.ts;
• every other checkImportCell arm;
• packages/components/src/ui/**.

Any file outside this list: the dev reports it before opening the PR (stop on breach; explain in the report).
Container & model: M, mode:subagent, model: opus (dispatch-gates --tier --repo objectstack-ai/objectui over these paths: no path-derived mandate; default tier). The contract review runs at the ceiling, CONTRACT_REVIEW_TIER, because of the Clause-②: yes line below. Reason: a new published language-pack key (landing-operations.md 条款②入队闸门, declaration limb).
Clause-②: yes
Responsibility: objectui plugin-grid + app-shell import preview: a time column is not checked and the user import checks no email, so the import button counts rows the server then refuses | the platform path: the preview marks a cell exactly where the server's import refuses it (objectui#11814, objectui#11889), mirroring core's time reader and the identity endpoint's email rule | every user importing records with a time column, and every admin importing users
Thread-read: 6055545691
Serial constraints cleared: none blocking.

• Open objectui PRs, read 2026-10-08T12:31Z: none touches ImportWizard.tsx or IdentityImportPanels.tsx. This seat's objectui#11960 (in the merge queue) adds a different key block to every pack. Whoever lands second merges main.
• In-flight claims, read 2026-10-08T12:31Z: none names these files.
• Prior work: objectui#11889 (9fc6ad78) and objectui#11814 (5e446abd) have landed. This card extends their arms.

Why Clause-②: yes:

• @object-ui/i18n publishes its locale packs, so the invalid_time sentence is a published key: minor on @object-ui/i18n.
• If checkImportCell's code union, or any type it widens, is reachable from @object-ui/plugin-grid's built entry, the dev reports it, and that package's changeset is minor too.
• The PR body carries Clause-②: yes at line start.
• A contract-review-tier record is owed before the PR is queued, and the seat runs it.

---

Generated by Claude Code

[objectstack-fleet]

Claim amendment — domain:ui seat 3, session_01CGZy1BGCjdN5cXqL9cnvB8, 2026-10-08T12:39Z. It amends the claim 6059931513, on the dev's mid-run report (session message, measured on main e44f9bc4).

Why. checkImportCell's arms live in ImportWizard.tsx, but the server mirrors they call do not: isImportableDateCell and isRecordEmail live in packages/plugin-grid/src/importCoercionContract.ts.

• The time reader has to reuse that file's private date grammar (ISO_TEMPORAL_CELL, YEAR_FIRST_CELL, namesRealCalendarDay, isWallClock, zonedCellUtcYear). Placing it in ImportWizard.tsx would copy those helpers, which is the fork triage ruled out (6055545691: "extend the arms … without forking them").
• isRecordEmail's doc comment says the user import's email column "reaches the wizard typed text, so this check never runs there". This card makes that false.

File surface, added:

• packages/plugin-grid/src/importCoercionContract.ts:

  • the time reader beside isImportableDateCell;
  • the identity endpoint's email mirror (isIdentityEmail) beside isRecordEmail;
  • the doc-comment correction.

  No other region.

• Its test, importCoercionContract.test.ts, for the new mirrors.

In-place conditions:

• Same card: the mirrors its two arms call.
• Mechanical: they sit beside the existing ones.
• No other holder: no in-flight claim names the file, and no open objectui PR touches it, read 2026-10-08T12:39Z.
• Same gate family: the plugin-grid tests.

Clause-②: yes, recorded:

• importCoercionContract.ts is not re-exported from @object-ui/plugin-grid's entry, so it adds no export.
• The one reachable widening is an optional emailRule flag on ImportWizardProps['fields'][number], which the claim's "types or flags" already allows. So @object-ui/plugin-grid is minor, besides @object-ui/i18n.
• identityImportFields is not reachable from app-shell's entry, so app-shell is patch.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 11913,
"status": "done",
"branch": "claude/issue-11913-import-time-identity-email",
"pr": "#11973",
"session": "session_01CGZy1BGCjdN5cXqL9cnvB8 (subagent; the parent's id)",
"premise_still_valid": true,
"summary": "Both legs were confirmed on origin/main e44f9bc and fixed. (1) checkImportCell had no time arm. It gains one (invalid_time), backed by isImportableTimeCell in importCoercionContract.ts. The mirror reads a cell as core 17.7.0's parseDateCell(cell, 'time') does: readTimeOfDayCell via the spec's own ClockTimeValueSchema plus the ISO-instant form, then readYearFirstCell. The new grid.import.invalidTime sentence is in all ten packs and the wizard defaults, and is used for both the preview mark and an invalid_time dry-run row. (2) identityImportFields typed the email column text. It is now typed email and flagged emailRule: 'identity'. The email arm then asks isIdentityEmail, a mirror of plugin-auth 17.7.0 isLikelyEmail + isPlaceholderEmail, instead of isRecordEmail. Neither rule is stricter, so the identity rule replaces the record rule rather than adding to it. The button count follows both legs. Each leg is pinned through the real wizard and ablated red. Draft PR 11973 is open at 603ad4e (main d7e9e9a merged twice, never rebased). Bundle Analysis: success.",
"tests": "At HEAD 603ad4e: vitest packages/plugin-grid/ plus the 4 app-shell import files -> Test Files 199 passed (199), Tests 1866 passed (1866). At fbdf522: vitest packages/plugin-grid/ packages/i18n/ -> Test Files 277 passed (277), Tests 3153 passed | 13 skipped (3166); packages/i18n is byte-identical between fbdf522 and 603ad4e. At 603ad4e: turbo build app-shell^... 28/28, then type-check for plugin-grid, i18n and app-shell all exit 0 (tsc --noEmit + tsconfig.test.json, which include the new test files). eslint on the 17 touched TS files: 0 errors, 11 warnings, all on pre-existing lines. One-off server differential probe (not committed): isImportableTimeCell vs installed core 17.7.0's exported parseDateCell(cell,'time') over 1592 cells, server takes 281, 0 disagreements; isIdentityEmail vs the 17.7.0 functions restated from the tag over 19 cells, 0 disagreements. Reverse checks via objectstack scripts/ablation-replace.mjs in wrap mode (anchor 1->0, blob changed, restore proven blob==HEAD and git diff HEAD empty), run at 34ade8b on files byte-identical at 603ad4e: (a) time arm deleted -> ImportWizard.cellCheck-11913 2 failed / 7 passed; (b) identity selection replaced by isRecordEmail -> 4 failed / 7 passed across the plugin-grid and app-shell 11913 files (the first attempt was refused by the tool before running anything, because the replacement was a substring of the anchor; it was rerun with a unique replacement); (c) the emailRule flag dropped from identityImportFields -> app-shell 11913 file 2 failed. Direction: red, as predicted. Source-resolved: the vitest alias maps @object-ui/plugin-grid to src, so no dist was involved.",
"mcp_calls": "2 - mcp__github__get_job_logs x2 (read-only: main d7e9e9a Bundle Analysis job 113334918968, for the eager-closure baseline, because the REST log download is 403 at the proxy). No write tool.",
"api_writes": "3 - all through the fleet relay (scripts/pm/fleet-write/dispatch.mjs, transport POST /repos/objectstack-ai/objectstack/dispatches): (1) pr_create POST /repos/objectstack-ai/objectui/pulls -> #11973 draft, read-back 12124 of 12124 bytes identical; (2) label-write.mjs --assign os-support-ai POST /repos//issues/11973/assignees, read-back MATCHES; (3) this os-dev-report comment, POST /repos//issues/11913/comments. Plus git push (not REST). No label writes.",
"open_questions": [],
"out_of_scope_findings": [
"carrier: next PR touching importTargetFields.ts or ObjectView's import wiring (承接者:无 named today) - noted, not filed. Type-level only: ImportTargetField.options?: unknown is not assignable to ImportWizardProps['fields'][number]['options']. ObjectView's fields conditional (identityImportFields(...) : importTargetFields(...)) compiles only through subtype reduction to the narrower identity shape. Measured: typing identityImportFields' return as ImportWizardProps['fields'], or as a Pick naming emailRule, turns app-shell type-check red with TS2322 at that conditional. Dedupe words: ImportTargetField options unknown · import fields conditional subtype reduction · identityImportFields return type",
"carrier: 承接者:无 - noted, not filed (only read, not measured through the public door). formatDryRunError has no case for the identity endpoint's upper-case dry-run codes (INVALID_EMAIL, INVALID_PHONE, NO_IDENTITY), so a user-import Validate row shows the endpoint's English text, not a localized sentence. Dedupe words: identity import dry run INVALID_EMAIL sentence · user import validate English error · formatDryRunError identity codes",
"carrier: 承接者:无 - noted, not filed. @object-ui/plugin-grid declares @objectstack/spec ^17.5.0, and spec 17.5.x's ClockTimeValueSchema still took a zone suffix (17.6.0 dropped it). A host resolving spec 17.5.x gets 17.5's clock grammar in the preview. The lockfile installs 17.7.0. Dedupe words: plugin-grid spec floor 17.5 ClockTimeValueSchema zone · time preview spec floor"
],
"gates": [
{
"cmd": "pnpm check:control-bytes",
"exit": 0,
"verdict": "check-control-bytes: OK (scanned 8047 tracked text file(s); skipped 85 binary)"
},
{
"cmd": "pnpm check:test-path-roots",
"exit": 0,
"verdict": "check-test-path-roots: OK"
},
{
"cmd": "pnpm check:changeset-claims",
"exit": 0,
"verdict": "No pending changeset names a file this change touches."
},
{
"cmd": "pnpm check:pending-changeset-literals",
"exit": 0,
"verdict": "No test source names a pending changeset."
},
{
"cmd": "pnpm check:i18n-keys",
"exit": 0,
"verdict": "Every in-scope call-site key resolves against the en pack (3306 keys)"
},
{
"cmd": "pnpm check:i18n-drift",
"exit": 0,
"verdict": "0 en value(s) changed (1 key(s) added, 0 removed)"
},
{
"cmd": "pnpm check:i18n-dead-keys",
"exit": 0,
"verdict": "report; grid.import.invalidTime not listed"
},
{
"cmd": "pnpm check:i18n-designer-parity",
"exit": 0,
"verdict": "Every en row has a zh row, and every shared row carries the same placeholders."
},
{
"cmd": "pnpm check:new-line-citations",
"exit": 0,
"verdict": "VERDICT new-cross-file-line-citations: 0 new citation(s), enforcement report-only -> exit 0"
},
{
"cmd": "pnpm check:spec-symbols",
"exit": 0,
"verdict": "ledger anchors: 2 declared; none renders an instruction its anchor card can no longer receive."
},
{
"cmd": "pnpm check:installed-pin-claims",
"exit": 0,
"verdict": "OK"
},
{
"cmd": "pnpm check:phantom-deps",
"exit": 0,
"verdict": "Every in-scope import is declared by the package that publishes it."
},
{
"cmd": "node scripts/check-changeset-presence.mjs",
"exit": 0,
"verdict": "17 source file(s) of 3 released package(s) changed, and this change declares 1 changeset(s)"
},
{
"cmd": "node scripts/check-changeset-no-major.mjs",
"exit": 0,
"verdict": "No changeset declares a major bump."
},
{
"cmd": "pnpm check:spec-floors",
"exit": 1,
"verdict": "NOT MEASURED: no-artifact findings only, on unbuilt app-shell/cli/plugin-gantt/plugin-timeline/plugin-tree; no finding names plugin-grid (built dist imports ClockTimeValueSchema, present at its 17.5.0 floor)"
},
{
"cmd": "pnpm check:readme-exports",
"exit": 1,
"verdict": "NOT MEASURED: type entries not on disk for unbuilt plugin-timeline/plugin-gantt (prerequisite)"
},
{
"cmd": "pnpm check:eager-locale-catalogues",
"exit": 2,
"verdict": "NOT MEASURED: PREREQUISITE NOT MET (no console build); CI Bundle Analysis ran it"
},
{
"cmd": "CI Bundle Analysis (check-run 113350300201, PR head 603ad4e)",
"exit": 0,
"verdict": "success; budget bot comment 6061603975: Eager closure (gzip, 337 chunks) 3311.3 KB / budget 3312.0 KB, Status PASS; main d7e9e9a push run reads 3311.0 KB (headroom 1.0 KB), so this PR adds +0.3 KB and leaves 0.7 KB headroom"
}
],
"ci": "At report time on 603ad4e: 29 success, 3 skipped, 10 in_progress, 0 failed (Lint, Type Check and Test shards still in_progress).",
"deviations": [
"importCoercionContract.ts: beyond the amendment's named regions, the year-first tail of the private importDateCellYear moved into a private yearFirstCellYear shared by the date and time readers (behaviour unchanged; the existing date pins pass unmodified). Named in the PR body for the review to rule on.",
"packages/i18n/src/tests/de-quote-pairing-3876.test.ts was edited (de census pins 75 -> 76 for the new row's one matched pair). It is a test beside the packs; named in the PR body.",
"The app-shell test is narrowed to 4 files (the identityImportFields / identity wrapper / importTargetFields readers) because the full 1172-file suite exceeds the foreground cap. Declared; CI runs it in full.",
"The commit trailers use the model-free pair per AGENTS.md (Claude-Session + Co-authored-by: Claude), and the PR footer is the os-dev session-URL form, not the harness's model-named attribution lines.",
"One queued lock wait was killed by my own outer timeout 590 (exit 124, nothing ran); it was rerun under the same OS_VERIFY_LOCK_SLOT.",
"The PR body says the review may rule on the yearFirstCellYear region; the PR body is not PATCHed after creation."
],
"files_changed": [
".changeset/11913-import-time-identity-email.md",
"packages/app-shell/src/views/IdentityImportPanels.tsx",
"packages/app-shell/src/views/tests/identityImportFields.emailRule-11913.test.tsx",
"packages/i18n/src/tests/de-quote-pairing-3876.test.ts",
"packages/i18n/src/locales/{ar,de,en,es,fr,ja,ko,pt,ru,zh}.ts",
"packages/plugin-grid/src/ImportWizard.tsx",
"packages/plugin-grid/src/ImportWizard.cellCheck-11913.test.tsx",
"packages/plugin-grid/src/importCoercionContract.ts",
"packages/plugin-grid/src/importCoercionContract.test.ts"
],
"widenings": "@object-ui/plugin-grid minor: ImportWizardProps['fields'][number].emailRule?: 'identity' (the only change reachable from the built entry; dist/index.d.ts names neither new mirror). @object-ui/i18n minor: grid.import.invalidTime with {{value}} in all ten packs. @object-ui/app-shell patch: nothing reachable.",
"line_budget": "not applicable (no skills/** surface)"
}

---

Generated by Claude Code

[objectstack-fleet]

State: pm:dispatched → pm:blocked (Blocked-by: #11978) — domain:ui seat 3, session_01CGZy1BGCjdN5cXqL9cnvB8, 2026-10-08T15:03Z.

• The work is done. PR objectui#11973 is at 603ad4e2. Every check is green except Test (shard 6/8) and its rollup Test.
• Why that check is not this PR's: it fails at ObjectHooksPanel.newHookTarget-11820.test.tsx:87, a timing race that reproduces on main. The standing-down comment on the PR has the evidence.
• Where the fix lives: objectui#11978 (domain:spec) carries it. No fix exists yet, and the seat has no re-run means.
• Body lines added: Blocked-by: #11978 and Unlock-action: re-check PR #11973.
• On unlock: the branch merges main, CI runs on the new head, the at-tier contract review is recorded on that head (Clause-②: yes), then ACCEPT and landing.
• Unchanged: the claim and the assignee stay.

---

Generated by Claude Code